# cve.now: Enituretechnology

The newest entries naming Enituretechnology as an affected vendor (up to 200), of 49 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-3646](https://cve.now/CVE-2026-3646.md): LTL Freight Quotes – R+L Carriers Edition \<= 3.3.13 - Missing Authorization to Unauthenticated Settings Update (CVSS 5.3)
- [CVE-2025-58644](https://cve.now/CVE-2025-58644.md): WordPress LTL Freight Quotes - TQL Edition Plugin \<= 1.2.6 - PHP Object Injection Vulnerability (CVSS 7.2)
- [CVE-2025-58643](https://cve.now/CVE-2025-58643.md): WordPress LTL Freight Quotes – Daylight Edition Plugin \<= 2.2.7 - PHP Object Injection Vulnerability (CVSS 7.2)
- [CVE-2025-58642](https://cve.now/CVE-2025-58642.md): WordPress LTL Freight Quotes – Day & Ross Edition Plugin \<= 2.1.11 - PHP Object Injection Vulnerability (CVSS 7.2)
- [CVE-2025-58218](https://cve.now/CVE-2025-58218.md): WordPress Small Package Quotes – USPS Edition Plugin \<= 1.3.9 - PHP Object Injection Vulnerability (CVSS 7.2)
- [CVE-2025-48155](https://cve.now/CVE-2025-48155.md): WordPress Residential Address Detection plugin \<= 2.5.9 - Broken Access Control Vulnerability (CVSS 5.3)
- [CVE-2025-5303](https://cve.now/CVE-2025-5303.md): LTL Freight Quotes – Freightview Edition \<= 1.0.11, LTL Freight Quotes – Daylight Edition \<=2.2.6 and LTL Freight Quotes – Day & Ross Edition \<= 2.1.10 - Unauthenticated Stored Cross-Site Scripting via \`expiry\_date\` Parameter (CVSS 7.2)
- [CVE-2025-22287](https://cve.now/CVE-2025-22287.md): WordPress LTL Freight Quotes – FreightQuote Edition plugin \<= 2.3.11 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-22285](https://cve.now/CVE-2025-22285.md): WordPress Pallet Packaging for WooCommerce Plugin \<= 1.1.15 - Broken Access Control vulnerability (CVSS 6.5)
- [CVE-2025-30916](https://cve.now/CVE-2025-30916.md): WordPress Residential Address Detection plugin \<= 2.5.4 - Broken Access Control vulnerability (CVSS 6.5)
- [CVE-2025-30915](https://cve.now/CVE-2025-30915.md): WordPress Small Package Quotes – Worldwide Express Edition plugin \<= 5.2.19 - Broken Access Control vulnerability (CVSS 6.5)
- [CVE-2025-31078](https://cve.now/CVE-2025-31078.md): WordPress Small Package Quotes – Worldwide Express Edition plugin \<= 5.2.18 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2025-26918](https://cve.now/CVE-2025-26918.md): WordPress Small Package Quotes – Unishippers Edition plugin \<= 2.4.9 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2025-27270](https://cve.now/CVE-2025-27270.md): WordPress Residential Address Detection Plugin \<= 2.5.4 - Arbitrary Option Update to Privilege Escalation vulnerability (CVSS 9.8)
- [CVE-2025-27268](https://cve.now/CVE-2025-27268.md): WordPress Small Package Quotes – Worldwide Express Edition Plugin \<= 5.2.18 - SQL Injection vulnerability (CVSS 9.3)
- [CVE-2025-26960](https://cve.now/CVE-2025-26960.md): WordPress Small Package Quotes – Unishippers Edition plugin \<= 2.4.9 - Broken Access Control vulnerability (CVSS 6.5)
- [CVE-2025-26764](https://cve.now/CVE-2025-26764.md): WordPress Distance Based Shipping Calculator plugin \<= 2.0.22 - Settings Change vulnerability (CVSS 6.5)
- [CVE-2024-13474](https://cve.now/CVE-2024-13474.md): LTL Freight Quotes – Purolator Edition \<= 2.2.3 - Unauthenticated SQL Injection (CVSS 7.5)
- [CVE-2024-13476](https://cve.now/CVE-2024-13476.md): LTL Freight Quotes – GlobalTranz Edition \<= 2.3.11 - Unauthenticated SQL Injection (CVSS 7.5)
- [CVE-2025-1483](https://cve.now/CVE-2025-1483.md): LTL Freight Quotes – GlobalTranz Edition \<= 2.3.12 - Missing Authorization to Unauthenticated Settings Update (CVSS 5.3)
- [CVE-2024-13534](https://cve.now/CVE-2024-13534.md): Small Package Quotes – Worldwide Express Edition \<= 5.2.18 - Unauthenticated SQL Injection (CVSS 7.5)
- [CVE-2024-13533](https://cve.now/CVE-2024-13533.md): Small Package Quotes – USPS Edition \<= 1.3.5 - Unauthenticated SQL Injection (CVSS 7.5)
- [CVE-2024-13483](https://cve.now/CVE-2024-13483.md): LTL Freight Quotes – SAIA Edition \<= 2.2.10 - Unauthenticated SQL Injection (CVSS 7.5)
- [CVE-2024-13491](https://cve.now/CVE-2024-13491.md): Small Package Quotes – For Customers of FedEx \<= 4.3.1 - Unauthenticated SQL Injection (CVSS 7.5)
- [CVE-2024-13481](https://cve.now/CVE-2024-13481.md): LTL Freight Quotes – R+L Carriers Edition \<= 3.3.4 - Unauthenticated SQL Injection (CVSS 7.5)
- [CVE-2024-13485](https://cve.now/CVE-2024-13485.md): LTL Freight Quotes – ABF Freight Edition \<= 3.3.7 - Unauthenticated SQL Injection (CVSS 7.5)
- [CVE-2024-13479](https://cve.now/CVE-2024-13479.md): LTL Freight Quotes – SEFL Edition \<= 3.2.4 - Unauthenticated SQL Injection (CVSS 7.5)
- [CVE-2024-13478](https://cve.now/CVE-2024-13478.md): LTL Freight Quotes – TForce Edition \<= 3.6.4 - Unauthenticated SQL Injection (CVSS 7.5)
- [CVE-2024-13489](https://cve.now/CVE-2024-13489.md): LTL Freight Quotes – Old Dominion Edition \<= 4.2.10 - Unauthenticated SQL Injection (CVSS 7.5)
- [CVE-2025-26765](https://cve.now/CVE-2025-26765.md): WordPress Distance Based Shipping Calculator plugin \<= 2.0.22 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-22291](https://cve.now/CVE-2025-22291.md): WordPress LTL Freight Quotes – Worldwide Express Edition plugin \<= 5.0.20 - Arbitrary Content Deletion vulnerability (CVSS 5.3)
- [CVE-2025-22290](https://cve.now/CVE-2025-22290.md): WordPress LTL Freight Quotes – FreightQuote Edition Plugin \<= 2.3.11 - SQL Injection vulnerability (CVSS 9.3)
- [CVE-2025-22289](https://cve.now/CVE-2025-22289.md): WordPress LTL Freight Quotes – Unishippers Edition plugin \<= 2.5.8 - Broken Access Control vulnerability (CVSS 6.5)
- [CVE-2025-22286](https://cve.now/CVE-2025-22286.md): WordPress LTL Freight Quotes – Worldwide Express Edition plugin \<= 5.0.21 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2025-22284](https://cve.now/CVE-2025-22284.md): WordPress LTL Freight Quotes – Unishippers Edition plugin \<= 2.5.8 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2024-13488](https://cve.now/CVE-2024-13488.md): LTL Freight Quotes – Estes Edition \<= 3.3.7 - Unauthenticated SQL Injection (CVSS 7.5)
- [CVE-2024-13480](https://cve.now/CVE-2024-13480.md): LTL Freight Quotes – For Customers of FedEx Freight \<= 3.4.1 - Unauthenticated SQL Injection (CVSS 7.5)
- [CVE-2024-13532](https://cve.now/CVE-2024-13532.md): Small Package Quotes – Purolator Edition \<= 3.6.4 - Unauthenticated SQL Injection (CVSS 7.5)
- [CVE-2024-13477](https://cve.now/CVE-2024-13477.md): LTL Freight Quotes – Unishippers Edition \<= 2.5.8 - Unauthenticated SQL Injection (CVSS 7.5)
- [CVE-2024-13531](https://cve.now/CVE-2024-13531.md): ShipEngine Shipping Quotes \<= 1.0.7 - Unauthenticated SQL Injection (CVSS 7.5)
- [CVE-2024-13475](https://cve.now/CVE-2024-13475.md): Small Package Quotes – UPS Edition \<= 4.5.16 - Unauthenticated SQL Injection (CVSS 7.5)
- [CVE-2024-13490](https://cve.now/CVE-2024-13490.md): LTL Freight Quotes – XPO Edition \<= 4.3.7 - Unauthenticated SQL Injection (CVSS 7.5)
- [CVE-2024-13473](https://cve.now/CVE-2024-13473.md): LTL Freight Quotes - Worldwide Express Edition \<= 5.0.20 - Unauthenticated SQL Injection (CVSS 7.5)
- [CVE-2025-24667](https://cve.now/CVE-2025-24667.md): WordPress Small Package Quotes Plugin \<= 5.2.17 - SQL Injection vulnerability (CVSS 9.3)
- [CVE-2025-24665](https://cve.now/CVE-2025-24665.md): WordPress Small Package Quotes Plugin \<= 2.4.8 - SQL Injection vulnerability (CVSS 9.3)
- [CVE-2025-24664](https://cve.now/CVE-2025-24664.md): WordPress LTL Freight Quotes Plugin \<= 5.0.20 - SQL Injection vulnerability (CVSS 9.3)
- [CVE-2025-22318](https://cve.now/CVE-2025-22318.md): WordPress Standard Box Sizes plugin \<= 1.6.13 - Broken Access Control vulnerability (CVSS 7.5)
- [CVE-2024-56301](https://cve.now/CVE-2024-56301.md): WordPress Distance Based Shipping Calculator Plugin \<= 2.0.21 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2024-52495](https://cve.now/CVE-2024-52495.md): WordPress Distance Based Shipping Calculator plugin \<= 2.0.23 - SQL Injection vulnerability (CVSS 8.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/enituretechnology
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.